critical10.0
CVE-2022-36331
Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthentica…
Impact
Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain access to user data. This issue affects My Cloud OS 5 devices: before 5.25.132; My Cloud Home and My Cloud Home Duo: before 8.13.1-102; SanDisk ibi: before 8.13.1-102.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Westerndigital | My Cloud Pr2100 Firmware | before 5.25.132 |
| Westerndigital | My Cloud Pr4100 Firmware | before 5.25.132 |
| Westerndigital | My Cloud Ex4100 Firmware | before 5.25.132 |
| Westerndigital | My Cloud Ex2 Ultra Firmware | before 5.25.132 |
| Westerndigital | My Cloud Mirror G2 Firmware | before 5.25.132 |
| Westerndigital | My Cloud Dl2100 Firmware | before 5.25.132 |
| Westerndigital | My Cloud Dl4100 Firmware | before 5.25.132 |
| Westerndigital | My Cloud Ex2100 Firmware | before 5.25.132 |
| Westerndigital | My Cloud Home Firmware | before 8.13.1-102 |
| Westerndigital | My Cloud Home Duo Firmware | before 8.13.1-102 |
| Westerndigital | Sandisk Ibi Firmware | before 8.13.1-102 |
| Westerndigital | My Cloud Firmware | before 5.25.132 |
Weakness classification
References
- NVD record
- CVE.org record
- https://https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update
- https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update
- https://https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update